Network Deployment (Distributed operating systems), v8.0 > Scripting the application serving environment (wsadmin) > Use properties files to manage system configuration > Manage specific configuration objects using properties files > Work with security properties files

Work with LTPA properties files

We can use properties files to modify or delete Lightweight Third Party Authentication (LTPA) properties.

Determine the changes to make to your LTPA configuration.

Start wsadmin.sh.

To start wsadmin using the Jython language, run...

WP_PROFILE/bin/wsadmin -lang jython

Use a properties file, you can modify or delete a LTPA object.

Run administrative commands using wsadmin to change a properties file for a LTPA object, validate the properties, and apply them to the configuration.

Actions for LTPA properties. We can modify or delete LTPA properties.

Action	Procedure
create	Not applicable
modify	Edit property values in the LTPA properties file and then run applyConfigProperties.
delete	Run deleteConfigProperties to delete one or more properties. If a deleted property has a default value, the property is set to the default value. Otherwise, the deleted property is removed.
create Property	Not applicable
delete Property	Not applicable

Optionally, you can use interactive mode with the commands:

AdminTask.command_name('-interactive')

Procedure

• Modify an existing properties file.
  1. Obtain a properties file for the LTPA object that you want to change.

     We can extract a properties file for an LTPA object using the extractConfigProperties command.

  2. Open the properties file in an editor and change the properties as needed.

     Ensure that the environment variables in the properties file match the system.

     To specify a custom property, edit the AttributeInfo value and properties values. An example LTPA properties file follows:

     #
     # Header
     #
     ResourceType=LTPA
     ImplementingResourceType=Security
     ResourceId=Cell=!{cellName}:Security=:LTPA=
     #
     
     #
     #Properties
     #
     simpleAuthConfig=system.LTPA
     keySetGroup=CellLTPAKeySetGroup #ObjectName(KeySetGroup)
     authContextImplClass=com.ibm.ISecurityLocalObjectTokenBaseImpl.WSSecurityContextLTPAImpl
     authConfig=system.LTPA
     isCredentialForwardable=false #boolean,default(false)
     timeout=120 #long,required,default(0)
     OID="oid:1.3.18.0.2.30.2"
     password=null #required
     authValidationConfig=system.LTPA
     
     
     #
     # Header SingleSignon Section
     #
     ResourceType=SingleSignon
     ImplementingResourceType=Security
     ResourceId=Cell=!{cellName}:Security=:LTPA=:SingleSignon=
     AttributeInfo=singleSignon
     #
     
     #
     #Properties
     #
     enabled=true #boolean,default(false)
     domainName=
     requiresSSL=false #boolean,default(false)
     
     
     EnvironmentVariablesSection
     #Environment Variables
     cellName=myCell
     

  3. Run applyConfigProperties to create or change an LTPA object.

     Run applyConfigProperties applies the properties file to the configuration. In this Jython example, the optional -reportFileName parameter produces a report named report.txt:

     AdminTask.applyConfigProperties(['-propertiesFileName myObjectType.props -reportFileName report.txt'])
     

• If you no longer need a property, you can delete the LTPA property.

  To delete one or more properties, specify only the properties to be deleted in the properties file and then run deleteConfigProperties; for example:

  AdminTask.deleteConfigProperties('[-propertiesFileName myObjectType.props -reportFileName report.txt]')
  

Results

We can use the properties file to configure and manage the LTPA properties.

What to do next

Save the changes to the configuration.
Extract properties files using wsadmin.sh
Create server, cluster, application, or authorization group objects using properties files and wsadmin scripting
Delete server, cluster, application, or authorization group objects using properties files

Related

PropertiesBasedConfiguration command group using wsadmin.sh

+

Search Tips   |   Advanced Search